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IN THE CLAIMS: 

The text of ai! pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with strike t hfeuf^. The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please CANCEL claims 11 and 22 and AMEND claims 1-10 and 12-21 in accordance 
with the following: 

1 . (CURRENTLY AMENDED) A control system in communication with a host control 
system and having a download function, comprising: 

a first storage element storing execution program data for e xecuting t o execute a control 
function in a rewritable status; 

a second storage element steflfna -to store a download module eoBtalm mincluding fresh 
pieces of update target execution program data and module identifying information; 

a first control unit receivinq t o receive the download module encrypted in the host control 
system by an encryption key generated from the same program data as the execution program 
data stored in said first storage element and from the module identifying information, and 
stefH ^to store the received download module in said second storage element; and 

a second control unit d e eryptin < [^ t o decry pt the download module by an encryption key 
generated in the control system itself f rom d a t a-l n - t he execution program data in said first 
storage element and from date hthe module identifying information of the download module in 
said second storage element and r e olao i ng to replace , when a storage start address, a data 
length and a check digit that are encrypted in the download module are decrypted into valid 
values in a plain text, the execution program data in said first storage element with the fresh 
execution program data decrypted. 

2. (CURRENTLY AMENDED) A control system having a download function according to 
claim 1 , further comprising ia third control unit maki mto control the control system to receive t he 
download module r eeei v a bl e- tha t- ewt a iR& - th e Hncluding the f resh execution program data for 
eaiy-a predetermined fixed period of time after starting the download function. 

3. (CURRENTLYAMENDED) A control system having a download function according to 
claim 2, further comprising a fourth control unit making t o control the control system to receive 
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the download module r e oe i v a bl o - th at- GOBta m s^ l^^e -mcluding the fr esh execution program data by 
restarting the download function when receiving a specified reset command in a state of being 
unable to receive the download module, 

4. (CURRENTLYAMENDED) A control system having a download function according to 
claim 2 or 3, further comprising a third storage element stefin ^o store a loader executed first 
when starting the download function, sterin ^o store the download module in said second 
storage element and exeoutina t o execute the execution program data for the control function 
that are stored in said first storage element, 

5. (CURRENTLYAMENDED) A control system having a download function according to 
claim 4, further comprising a fifth control unit controlling the control system to makeffl akim the 
execution program data in said first storage element executable by the loader when a check digit 
value obtained as a result of calculation based on all pieces of data in the execution program 
data in said first storage element, is coincident with data in a specified address in the execution 
program data in said first storage element. 

6. (CURRENTLYAMENDED) A control system having a download function according to 
claim 5, further comprising a sixth control unit stefi mto store the execution program data, 
executable and stored in said first storage element, in said third storage element stored with the 
loader, and restoring t o restore the control function by storing said first storage element with the 
loader's own execution program data in said third storage element when judging that the 
execution program data can not be executed as a result of checking the execution program data 
in said first storage element upon a startup of the loader 

7. (CURRENTLYAMENDED) A control system having a download function according to 
claim 5, further comprising a seventh control unit enab l ina t o enable the fresh execution program 
data to be stored by initializing said first storage element into a known status when judging that 
the execution program data can not be executed as a result of checking the execution program 
data in said first storage element upon a startup of the loader. 

8. (CURRENTLYAMENDED) A control system having a download function according to 
claim 6, further comprising an eighth control unit settii ^oset a queuing time till the loader's own 
execution program data are stored in said first storage element, and restricting a repetition of 
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initializing said first storage element by the loader and storing said second storage element with 
the download module containing unlawful execution program data, 

9. (CURRENTLYAMENDED) A control system having a download function according to 
claim 7, further comprising a ninth control unit se ttinq t o set a queuing time till said first storage 
element is initialized by the loader, and restricting a repetition of initializing said first storage 
element by the loader and steri roto store said second storage element with the download 
module containing unlawful execution program data. 

10, (CURRENTLYAMENDED) A control system having a download function according to 
claim 1, wherein the download module is structur e d o f includinq a fixed-length header field stored 
with the module identifying infonnation containinq including at least a module name, a module 
creation date, a module version number and a storage start address, and at least one data field 
stored with a block length and data having a length corresponding to this block length, and 

there is encrypted a block having the data field c o nt aj n im includinq an actual data length 
corresponding to the execution program data, a storage start address, the execution program 
data, pad data for adjusting a data length to a cipherable length and a check digit generated 
from the above data. 

11. (CANCELLED) A control system having a download function according to claim 10, 
wherein the download module is decrypted by an encryption key generated from the data in the 
execution program data in said first storage element and from the data in the module identifying 
information of the download module in said second storage element. 

12, (CURRENTLYAMENDED) A download control method of a control system, 
comprising: 

storing a first storage element with execution program data for executing a control 
function in a rewritable status; 

storing a second storage element with a download module containing including f resh 
pieces of update target execution program data and module identifying information; 

receiving the download module encrypted in a host control system bv an encryption key 
generated from the same program data as the execution program data stored in said first 
storage element and from the module identifying infomiation, and storing the received download 
module in said second storage element; and 
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decrypting the download module by an encryption key generated in the control system 
itself f rom data4r^the execution program data in said first storage element and from data-the 
module identlfvinq information of the download module in said second storage element and 
replacing, when a storage start address, a data length and a check digit that are encrypted in the 
download module are decrypted into valid values in a plain text, the execution program data in 
said first storage element with the fresh execution program data decrypted. 

13. (CURRENTLYAMENDED) A download control method according to claim 12, further 
comprising controlling the control system to receive m akifi^the download module r o G e ivab t e that 
contains includinp; the fresh execution program data for only a predetermined fixed period of time 
after starting the download function. 

14. (CURRENTLYAMENDED) A download control method according to claim 13, further 
comprising controlling the control system to receive m akiro-the download module re c ei vable th at 
conta i ns including the fresh execution program data by restarting the download function when 
receiving a specified reset command in a state of being unable to receive the download module. 

15. (CURRENTLYAMENDED) A download control method according to claim 13 or 14, 
further comprising executing first a loader stored in^ third storage element, executing the 
download function by this loader, and executing the execution program data for the control 
function that are stored in said first storage element when it is normally ended to make the 
download module receivable by the download function. 

16. (CURRENTLYAMENDED) A download control method according to claim 15, further 
comprising making the execution program data in said first storage element executable by the 
loader when a check digit value obtained as a result of aLcalculation based on all pieces of data 
in the execution program data in said first storage element, is coincident with data in a specified 
address in the execution program data in said first storage element. 

17. (CURRENTLYAMENDED) A download control method according to claim 16, further 
comprising: 

storing the execution program data, executable and stored in said first storage element, 
in said third storage element stored with the loader; and 
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restoring the control function by storing said first storage element with the loader's own 
execution program data in said third storage element when fij^gmo determininq that the 
execution program data can not be executed as a result of checking the execution program data 
in said first storage element upon a startup of the loader. 

18. (CURRENTLYAMENDED) A download control method according to claim 16, further 
comprising enabling the fresh execution program data to be stored by initializing said first 
storage element into a known status when jugy mdetermining that the execution program data 
can not be executed as a result of checking the execution program data in said first storage 
element upon a startup of the loader. 

19. (CURRENTLYAMENDED) A download control method according to claim 17, further 
comprising setting a queuing time tH Iuntil the loader's own execution program data are stored in 
said first storage element, and restricting a repetition of initializing said first storage element by 
the loader and storing said second storage element with the download module containing 
unlawful execution program data. 

20. (CURRENTLYAMENDED) A download control method according to claim 18, further 
comprising setting a queuing time titi until said first storage element is initialized by the loader, 
and restricting a repetition of initializing said first storage element by the loader and storing said 
second storage element with the download module containing unlawful execution program data. 

21. (CURRENTLYAMENDED) A download control method according to claim 12, 
wherein the download module Ia-s tru6 tuf ^4 e fi ncludinq a fixed-length header field stored with the 
module identifying information containing at least a module name, a module creation date, a 
module version number and a storage start address, and at least one data field stored with a 
block length and data having a length corresponding to this block length, and 

there is encrypted a block having the data field c o ntaini n g includinQ an actual data length 
corresponding to the execution program data, a storage start address, the execution program 
data, pad data for adjusting a data length to a cipherable length and a check digit generated 
from the above data. 

22. (CANCELLED) A download control method according to claim 21, wherein the 
download module is decrypted by an encryption key generated from the data in the execution 
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program data in said first storage element and from the data in tlie module identifying 
information of the download module in said second storage element. 
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